$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: RISPoOd0sg7K6cmS7usE6dhVCrbdy+wurSvHu6Phq7Y= Subject key identifier: B1:59:70:A8:64:0A:8D:2F:47:58:14:02:9C:CE:EE:3A:CC:58:3B:A7 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 7F Signing time: Mon 03 Nov 2025 06:45:13 +0000 Manifest this update: Mon 03 Nov 2025 06:45:13 +0000 Manifest next update: Mon 10 Nov 2025 06:45:13 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: Tj9Y1gNQnp3OAitvYJA5yJMOq7GsE0HsfPItHwkj9E8=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Nov 3 06:45:13 2025 GMT Not After : Nov 10 06:45:13 2025 GMT Subject: CN=69084f79-5c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:04:14:57:71:03:52:d4:44:4a:19:b3:34: 98:3b:8b:a8:26:78:62:07:c1:1e:93:7c:f9:57:55: a4:cb:19:42:d4:97:b9:1c:47:05:0b:50:98:6e:ae: e8:3a:02:89:c3:2f:71:0a:51:48:78:fd:5a:19:3c: 91:57:02:39:13:ad:19:3b:57:ce:44:f2:e8:87:f7: 75:6b:1e:b0:9e:1a:c4:d1:0d:b5:14:c6:f1:f9:fb: de:31:63:d9:6e:ea:11:b8:62:8e:47:30:29:97:b5: 9c:26:6e:b1:b0:ea:5b:45:51:34:2f:0a:a3:75:e3: 28:0d:d5:f7:fa:4c:1b:07:47:89:e2:1c:62:b3:32: dd:0b:10:0a:14:58:59:45:b6:e3:69:b5:92:75:70: 5e:e4:8c:67:07:7b:38:69:39:61:28:7f:00:a9:cb: e1:00:f5:0c:1b:73:f9:10:a4:ea:17:e9:40:f0:b8: fe:92:bb:76:b6:a2:0f:7c:88:82:fe:01:8f:d9:45: 07:f9:a8:1b:e1:b2:11:c7:41:14:2c:f3:df:59:37: f4:ce:bf:e8:39:23:53:7b:40:46:ce:c9:19:49:72: 0d:b7:b7:bf:ac:bb:f3:95:ee:22:e3:1e:f5:5e:c3: 15:6e:32:8a:4e:15:f2:61:a9:db:a0:e1:68:73:49: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:59:70:A8:64:0A:8D:2F:47:58:14:02:9C:CE:EE:3A:CC:58:3B:A7 X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:ca:1d:0c:a9:83:e5:84:6d:bb:d7:0b:65:4e:00:7d:4a:e5: 30:83:12:c2:d6:c1:b3:ef:49:d5:8d:6e:33:a2:f2:e8:32:f4: 61:92:19:57:e2:13:4b:6b:df:ad:22:9c:07:c9:fd:d9:81:a6: 54:9f:1d:d6:46:0a:44:e3:9c:65:0a:b9:8d:2c:4a:04:29:bb: df:1d:52:e5:0c:25:cf:26:48:e1:69:5a:e2:dc:44:37:c1:cf: eb:94:54:53:a6:26:80:b5:c2:fc:76:15:8a:8d:8b:ff:e4:73: 03:e8:dc:7d:b4:a5:49:01:b9:b0:3f:0e:97:b3:9e:00:6f:1c: 6c:d1:3e:8b:69:93:38:55:64:54:94:c3:08:17:27:a2:b7:cd: ca:d3:b9:6c:02:62:e8:b0:61:08:63:4d:a3:51:76:0e:77:6e: 27:24:29:25:71:38:8c:76:e8:3e:a9:9b:87:41:36:7a:db:db: f0:43:9e:6a:e8:e8:ae:dd:a1:51:47:23:57:8a:76:2a:b4:3c: 73:ea:b9:f1:80:2c:2a:b2:fd:b1:c0:25:17:ed:45:30:16:32: b4:43:34:91:da:23:fc:37:93:b9:87:f5:22:77:b4:e5:d1:56: 94:e3:75:78:07:fa:03:d3:06:b8:d3:04:66:43:33:29:2b:fe: 91:27:5f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA3NjkxMTAvBgNVBAUTKDJGQ0IzQzI1NTY1Qzk0MDQxN0JFRTJBQUY4ODM4Q0U0 MzNFMkI4M0EwHhcNMjUxMTAzMDY0NTEzWhcNMjUxMTEwMDY0NTEzWjAYMRYwFAYD VQQDEw02OTA4NGY3OS01YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26YEFFdxA1LUREoZszSYO4uoJnhiB8Eek3z5V1WkyxlC1Je5HEcFC1CYbq7o OgKJwy9xClFIeP1aGTyRVwI5E60ZO1fORPLoh/d1ax6wnhrE0Q21FMbx+fveMWPZ buoRuGKORzApl7WcJm6xsOpbRVE0LwqjdeMoDdX3+kwbB0eJ4hxiszLdCxAKFFhZ RbbjabWSdXBe5IxnB3s4aTlhKH8AqcvhAPUMG3P5EKTqF+lA8Lj+krt2tqIPfIiC /gGP2UUH+agb4bIRx0EULPPfWTf0zr/oOSNTe0BGzskZSXINt7e/rLvzle4i4x71 XsMVbjKKThXyYanboOFoc0mWPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFZcKhk Co0vR1gUApzO7jrMWDunMB8GA1UdIwQYMBaAFC/LPCVWXJQEF77iqviDjOQz4rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDc2OS81NDU2ODhDQUZC MjQxMUVGQjc2QjlGNEJDNEY5QUUwMi9MOHM4SlZaY2xBUVh2dUtxLUlPTTVEUGl1 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDc2OS81NDU2ODhDQUZCMjQxMUVGQjc2QjlGNEJDNEY5QUUwMi9MOHM4SlZaY2xB UVh2dUtxLUlPTTVEUGl1RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZyh0MqYPlhG271wtlTgB9SuUwgxLC1sGz70nVjW4zovLoMvRhkhlX 4hNLa9+tIpwHyf3ZgaZUnx3WRgpE45xlCrmNLEoEKbvfHVLlDCXPJkjhaVri3EQ3 wc/rlFRTpiaAtcL8dhWKjYv/5HMD6Nx9tKVJAbmwPw6Xs54Abxxs0T6LaZM4VWRU lMMIFyeit83K07lsAmLosGEIY02jUXYOd24nJCklcTiMdug+qZuHQTZ629vwQ55q 6Oiu3aFRRyNXinYqtDxz6rnxgCwqsv2xwCUX7UUwFjK0QzSR2iP8N5O5h/Uid7Tl 0VaU43V4B/oD0wa40wRmQzMpK/6RJ18m -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:55 2025 by rpki-client